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POWER-ON / RESET EVENT TAKES PLACE - 2 to 



L1 EXECUTES TO PERFORM WAKE-UP 
FUNCTIONS 



NO, TWO 
ARE VALID 



BOOT USING THE 
NEWER VALID L2 
VERSION 




-PIS 



YES- 



ERROR 



BOOT USING THE 
ONLY VALID L2 
VERSION 
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L2 PERFORMS POWER ON SELF TEST (POST), CHECKS 
THE FUNCTIONALITY/RESOURCES OF THE SYSTEM AND \^£3S 
PERFORMS BASE LEVEL DIAGNOSTICS OF THE SYSTEM 



I 



NO, TWO 
ARE VALID 



BOOT USING THE 
NEWER VALID L3 
VERSION 




YES- 



ERROR 



BOOT USING THE 
ONLY VALID L3 
VERSION 



FIG. 4(A) 
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L3: OPERATING SYSTEM INITIALIZATION TAKES 
PLACE, DEVICE DRIVERS GET LOADED 



CHECK TO DETERMINE IF THE BOOT FLASH ON L3 
IS THE SAME IMAGE AS THE SYSTEM VERSION 
STORED IN THE DISK ARRAY 
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L3 IMAGE COMPLETES 
EXECUTION: (1) REMAINDER OF 
OS IS LOADED; (2) HIGH LEVEL 
DIAGNOSTICS ARE PERFORMED; 
AND (3) THE APPLICATION IS 
INVOKED 
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RETURN 



FLASH THE OLDER L3 IMAGE WITH THE SYSTEM 

VERSION OBTAINED FROM THE DISK ARRAY - %?7S 



RE-BOOT CONTROLLER 



RETURN 



FIG. 4(B) 
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L3: OPERATING SYSTEM INITIALIZATION TAKES 
PLACE, DEVICE DRIVERS GET LOADED 
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CHECK TO DETERMINE IF THE BOOT FLASH ON L2 
IS THE SAME IMAGE AS THE SYSTEM VERSION 
STORED IN THE DISK ARRAY 
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CHECK TO DETERMINE IF THE 
BOOT FLASH ON L3 IS THE SAME 
IMAGE AS THE SYSTEM VERSION 
STORED IN THE DISK ARRAY 




FLASH THE OLDER L2 IMAGE WITH 
THE SYSTEM VERSION OBTAINED 
FROM THE DISK ARRAY 



FLASH THE OLDER L3 IMAGE 
WITH THE SYSTEM VERSION 
OBTAINED FROM THE DISK 
ARRAY 



RE-BOOT CONTROLLER 



RETURN 



RE-BOOT CONTROLLER 



RETURN 



FIG. 4(C) 
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L3 IMAGE COMPLETES EXECUTION: (1) 
REMAINDER OF OS IS LOADED; (2) 
HIGH LEVEL DIAGNOSTICS ARE 
PERFORMED; AND (3) THE 
APPLICATION IS INVOKED 



RETURN 
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START 



WHILE BOTH CONTROLLERS ARE ACTIVE, REPLACE THE 
SYSTEM SOFTWARE VERSION INSTALLED IN THE DISK 
ARRAY SUBSYSTEM 



WHILE CONTROLLER 2 IS ACTIVE, REBOOT CONTROLLER 1 
CAUSING IT TO REFLASH ITS L3 MEMORY (IF NECESSARY) 
TO STORE THE UPDATED SOFTWARE VERSION FROM THE 
DISK ARRAY SUBSYSTEM 



AFTER CONTROLLER 1 IS OPERATING AGAIN, REBOOT 
CONTROLLER 2 CAUSING IT TO REFLASH ITS L3 MEMORY 

(IF NECESSARY) TO STORE THE 
UPDATED SOFTWARE VERSION FROM THE DISK ARRAY 
SUBSYSTEM 



AFTER REBOOTING OF BOTH CONTROLLERS, 
THEY HAVE INSTALLED THEREIN THE REPLACED SYSTEM 
SOFTWARE 
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RETURN 



FIG. 5 



